Re: [FW-1] Error: "PS: less than 10 percent license free"

2006-02-20 Thread Bill Mathews
Ray is correct. This license is enforced differently from version to version (and HFA to HFA) but it is most definitely licensed by total number of users. Bill Ray wrote: Don't know. What version and HFA level are you on? Ray = To set vac

Re: [FW-1] Error: "PS: less than 10 percent license free"

2006-02-20 Thread Ray
Don't know. What version and HFA level are you on? Ray From: Mark Williams <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] Error: "PS: less than 10 percent license free" Date: Mon, 20 Feb

[FW-1] ASf VPN assistance:Warning replay attack!!

2006-02-20 Thread john maverick
HI Gurus, WE have an ASF 6000 series box having VPN tunnel with another ASF cluster...the VPN between the two drops ocassionally and works only one way...the encryption domains of both match so do all other parameters,sometimes we get a drop for esp with "warning" replay attack for esp traffic fro

Re: [FW-1] Linux Worm...should we be worried for SPLAT.....

2006-02-20 Thread Jørn Dahl-Stamnes
On Monday 20 February 2006 15:09, no-need to-list wrote: > http://securityresponse.symantec.com/avcenter/venc/data/linux.plupii.c.html > > > > When Linux.Plupii.C is executed, it performs the following actions: > > >Opens a back door on UDP port 27015, which enables a remote attacker to > hav

[FW-1] Linux Worm...should we be worried for SPLAT.....

2006-02-20 Thread no-need to-list
http://securityresponse.symantec.com/avcenter/venc/data/linux.plupii.c.html When Linux.Plupii.C is executed, it performs the following actions: Opens a back door on UDP port 27015, which enables a remote attacker to have unauthorized access to the compromised computer.

Re: [FW-1] Route issue ... newbie alert

2006-02-20 Thread Ramki Security
Routing is totally handled by the underlying OS. Can you provide more information on the kind of OS. Looks like obviously a route configuration issue. Check all the other interfaces/routes on the box to see if any issues there. Ramki MARTIN, SAM wrote: All: ... maybe a mispost to the chec

Re: [FW-1] Route issue ... newbie alert

2006-02-20 Thread Javier Hijas
Your problem seem not to be clear with your description: fw-1 does not forward packets? fw-1 does not reach 172.16.21.0?... Did you check spoofing definitions and ip_forward kernel parameter? MARTIN, SAM wrote: > All: > ... maybe a mispost to the checkpoint list, Idunno ... > Checkpoint FW

Re: [FW-1] Please help with a ClusterXL question

2006-02-20 Thread Javier Hijas
> so what it means is that when I ping hostX from FirewallB, hostX will see > the clusterXL IP address and the echo reply from hostX will come back to > FirewallA. > Is this the way ClusterXL works? Yes, that's the way. FW-1 will always use the ip you defined as ip address for that cluster inte

Re: [FW-1] Error: "PS: less than 10 percent license free"

2006-02-20 Thread Mark Williams
Yes, about 260 users uses the Policy Server and are in the same group plus 50 users, which are not using the policy server. We have a license for only 100 VPN Users. Why did i get this message not much earlier, if you are right and the license is for total users and not for concurrent onses. I